| CNNVD-ID编号 | CNNVD-199912-019 |
| CVE编号 | CVE-1999-0828 |
| 发布时间 | 1999-12-02 |
| 更新时间 | 2005-10-20 |
| 漏洞类型 | 边界条件错误 |
| 漏洞来源 | First posted to BugTraq by Brock Tellier |
| 危险等级 | 低危 |
| 威胁类型 | 本地 |
| 厂 商 | sco |
UnixWare的pkg命令，如pkginfo，pkgcat和pkgaram等存在漏洞。本地用户可以通过dacread权限读取任意文件。
A temporary solution is to remove the entries from /etc/security/tcb/privs. Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com.
暂无